Multi-Antenna Gaussian Broadcast Channels with 

Confidential Messages 



Ruoheng Liu and H. Vincent Poor 
Department of Electrical Engineering, Princeton University, Princeton, NJ 08544 
Email: {rliu,poor} @princeton.edu 



00 ' 

o : 
o : 

<: 
(N : 



> 
OS 

o 

oo 
O 

> 

X 



Abstract — In wireless data networks, communication is partic- 
ularly susceptible to eavesdropping due to its broadcast nature. 
Security and privacy systems have become critical for wireless 
providers and enterprise networks. This paper considers the 
problem of secret communication over a Gaussian broadcast 
channel, where a multi-antenna transmitter sends independent 
confidential messages to two users with information-theoretic se- 
crecy. That is, each user would like to obtain its own confidential 
message in a reliable and safe manner. This communication 
model is referred to as the multi-antenna Gaussian broadcast 
channel with confidential messages (MGBC-CM). Under this 
communication scenario, a secret dirty-paper coding scheme 
and the corresponding achievable secrecy rate region are first 
developed based on Gaussian codebooks. Next, a computable 
Sato-type outer bound on the secrecy capacity region is provided 
for the MGBC-CM. Furthermore, the Sato-type outer bound 
proves to be consistent with the boundary of the secret dirty- 
paper coding achievable rate region, and hence, the secrecy 
capacity region of the MGBC-CM is established. Finally, a 
numerical example demonstrates that both users can achieve 
positive rates simultaneously under the information-theoretic 
secrecy requirement. 

I. Introduction 

The demand for efficient, reliable, and secret data com- 
munication over wireless networks has become increasingly 
critical in recent years. Due to its broadcast nature, wireless 
communication is particularly susceptible to eavesdropping. 
The inherent nature of wireless networks exposes not only 
vulnerabilities that a malicious user can exploit to severely 
compromise the network, but also multiplies information 
confidentiality concerns with respect to in-network terminals. 
Hence, security and privacy systems have become critical for 
wireless providers and enterprise networks. 

In this work, we consider multiple antenna secret broadcast 
in wireless networks. This research is inspired by the seminal 
paper [1], in which Wyner introduced the so-called wiretap 
channel and proposed an information theoretic approach to 
secret communication schemes. Under the assumption that 
the channel to the eavesdropper is a degraded version of 
that to the desired receiver, Wyner characterized the capacity- 
secrecy tradeoff for the discrete memoryless wiretap channel 
and showed that secret communication is possible without 
sharing a secret key. Later, the result was extended by Csiszar 
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Fig. 1 . Channel model of multiple-antenna Gaussian broadcast channel with 
confidential messages 



and Korner who determined the secrecy capacity for the non- 
degraded broadcast channel (BC) with a single confidential 
message intended for one of the users [2]. 

In more general wireless network scenarios, secret commu- 
nication may involve multiple users and multiple antennas. 
Consequently, a significant recent research effort has been 
invested in the study of the information-theoretic limits of 
secret communication in different wireless network environ- 
ments including multi-user communication with confidential 
messages [3]-[8], secret wireless communication on fading 
channels [9]-[ll], and the Gaussian multiple-input single- 
output (MISO) and multiple-input multiple-output (MIMO) 
wiretap channels [12]-[16]. 

These issues and results motivate us to study the multi- 
antenna Gaussian BC with confidential messages (MGBC- 
CM), in which independent confidential messages from a 
multi-antenna transmitter are to be communicated to two users. 
The corresponding broadcast communication model is shown 
in Fig. [T] Each user would like to obtain its own message 
reliably and confidentially. 

To give insight into this problem, we first consider a single- 
antenna Gaussian BC. Note that this channel is degraded [17], 
which means that if a message can be successfully decoded 
by the inferior user, then the superior user is also ensured 
of decoding it. Hence, the secrecy rate of the inferior user is 
zero and this problem is reduced to the scalar Gaussian wiretap 
channel problem [18] whose secrecy capacity is now the max- 
imum rate achievable by the superior user This analysis gives 
rise to the question: can the transmitter, in fact, communicate 
with both users confidentially at nonzero rate under some other 
conditions? Roughly speaking, the answer is in the affirmative. 
In particular, the transmitter can communicate when equipped 



with sufficiently separated multiple antennas. 

We here have two goals motivated directly by questions 
arising in practice. The first is to determine conditions under 
which both users can obtain their own confidential messages 
in a reliable and safe manner This is equivalent to evaluating 
the secrecy capacity region for the MGBC-CM. The second is 
to show how the transmitter should broadcast confidentially, 
which is equivalent to designing an achievable secret coding 
scheme. To this end, we first describe a secret dirty-paper 
coding (DPC) scheme and derive the corresponding achievable 
rate region based on Gaussian codebooks. The secret DPC is 
based on double-binning [6] which enables both joint encoding 
and preserving confidentiality. Next, a computable Sato-type 
outer bound on the secrecy capacity region is developed for the 
MGBC-CM. Furthermore, the Sato-type outer bound proves 
to be consistent with the boundary of the secret dirty-paper 
coding achievable rate region, and hence, the secrecy capacity 
region of the MGBC-CM is established. Finally, a numerical 
example demonstrates that both users can achieve positive 
rates simultaneously under the information-theoretic secrecy 
requirement. 

II. System Model and Definitions 

A. Channel Model 

We consider the communication of confidential messages to 
two users over a Gaussian BC via t > 2 transmit-antennas. 
Each user is equipped with a single receive-antenna. As 
shown in Fig.[T] the transmitter sends independent confidential 
messages Wi and W2 in n channel uses with nRi and nR-z 
bits, respectively. The message Wi is destined for user 1 and 
eavesdropped upon by user 2, whereas the message W2 is 
destined for user 2 and eavesdropped upon by user 1. This 
communication scenario is referred to as the multi-antenna 
Gaussian BC with confidential messages. The Gaussian BC is 
an additive noise channel and the received symbols at user 1 
and user 2 can be represented as follows: 

yiS = h-^Xj + Zi,,; 

2/2,4 = g^Xj + Z2,i, i = 1, . . . , n (1) 

where £ C* is a complex input vector at time i, {zi i] 
and {^2,,} correspond to two independent, zero-mean, unit- 
variance, complex Gaussian noise sequences, and h, g G C* 
are fixed, complex channel attenuation vectors imposed on 
user 1 and user 2, respectively. The channel input is con- 
strained by tr(A'x) < P, where A'x is the channel input 
covariance matrix and P is the average total power limitation 
at the transmitter We also assume that both the transmitter 
and users are aware of the attenuation vectors. 

B. Important Channel Parameters for the MGBC-CM 

For the MGBC-CM, we are interested in the following 
important parameters, which are related to the generalized 
eigenvalue problem. Let Ai and ei denote the largest general- 
ized eigenvalue and the corresponding normalized eigenvector 



of the pencil (/ + Phh^, / + Pgg^) so that ef ei = 1 and 

(/ + Phh^)ei = Ai(/ + Pgg^)ei. (2) 

Similarly, we define A2 and 62 as the largest generalized 
eigenvalue and the corresponding normalized eigenvector of 
the pencil (/ + Pgg" , I + Phh-^) so that ef^e2 = 1 and 

(/ + Pgg^)e2 = A2(/ + Phh^)e2. (3) 

A useful property of Ai and A2 is described as follows. 

Lemma 1: For any channel attenuation vector pair h and 
g, the largest generalized eigenvalues of the pencil (/ + 
Phh", I + Pgg") and the pencil (/ + Pgg",I + Phh") 
satisfy Ai > 1 and A2 > 1. Moreover, if h and g are linearly 
independent, then both Ai and A2 are strictly greater than 1. 

C. Definitions 

We now define the secret codebook, the probability of error, 
the secrecy level, and the secrecy capacity region for the 
MGBC-CM as follows. 

An (2"-«i,2"-«2 n) secret codebook for the MGBC-CM 
consists of the following: 

1) Two message sets: Wfc = {1, . . . , 2"^*^}, for fc = 1, 2. 

2) A stochastic encoding function specified by a condi- 
tional probability density p{x"\wi,'W2), where x" = 
[xi, . . . , x„] e C*^", Wk e Wfc for fc = 1, 2, and 

/ p(x"|'u;i,W2) = 1. 

J X" 

3) Decoding functions (j>i and (f)2- The decoding function 
at user fc is a deterministic mapping (j)k : yj} — > Wk- 

At the receiver ends, the error performance and the secrecy 
level are evaluated by the following performance measures. 

1) The reliability is measured by the maximum error prob- 
ability 

Pi")^max{p(l\Fi:^)} 

where pjf^f} is the error probability for user fc. 

2) The secrecy levels with respect to confidential mes- 
sages Wi and W2 are measured, respectively, at user 2 
and user 1 with respect to the equivocation rates 
i7?(W2|Yi") and 1^2"). 

A rate pair {Ri, R2) is said to be achievable for the MGBC- 
CM if, for any e > 0, there exists an (2"^^, 2"-"^, n) code 
that satisfies Pi"' < e, and the information-theoretic secrecy 
requirement 

nRi - H{Wi\Y^) < ne and ni?2 - H{W2\Y^) < ne. (4) 

The secrecy capacity region C^'^ of the MGBC-CM is the 
closure of the set of all achievable rate pairs (i?i, i?2). 

III. Main Result 

The two-user Gaussian BC with multiple transmit-antennas 
is non-degraded. For this channel, we have the following 
closed-from result on the secrecy capacity region under the 
information-theoretic secrecy requirement. 



Theorem 1: Consider an MGBC-CM modeled as in ([T])- Let 

_ l + aPlh^eip 
"^'^"^ " l + aP|g^ei|2' 

72(a) be the largest generalized eigenvalue of the pencil 

(1 - a)Pggg (1 - a)Ph\i" \ 

l + aP|g^ei|2' ^ l + aP|h«ei|2y' ' ^ ' 

and 7?.'^^ (a) denote the union of all (Pi,P2) satisfying 

0<Ri <log2 7i(a) 
and < i?2 < log2 72(a)- 

Then the secrecy capacity region of the MGBC-CM is 



0<a<l 

where co{iS} denotes the convex hull of the set S. 

Proof: The achievability part of Theorem [T| is based on 
secret dirty-paper coding inner bound in Sec.|IV] The converse 
part is based on Sato-type outer bound in Sec. [V] We provide 
the complete proof in [14]. ■ 

Corollary 1: For the MGBC-CM, the maximum secrecy 
rate of user 1 is given by 



Ri 



max = max log2 71(a) = log2 Ai 

0<a<l 



where Ai is defined in (|2]i. 

Example: (MISO wiretap channels) A special case of the 
MGBC-CM model is the Gaussian MISO wiretap channel 
studied in [12], [19], [20], where the transmitter sends con- 
fidential information to only one user and treats another user 
as an eavesdropper Let us consider a Gaussian MISO wiretap 
channel modeled in ([T]i, where user 1 is the legitimate receiver 
and user 2 is the eavesdropper. Corollary [T] implies that 
the secrecy capacity of the Gaussian MISO wiretap channel 
corresponds to the corner point of C^*^. Hence, the secrecy 
capacity of the Gaussian MISO wiretap channel is given by 



C: 



MISO 



l0g2 Ai, 



which coincides with the result of [19]. 

For the MGBC-CM, the actions of user 1 and user 2 are 
symmetric to each other, i.e., each user decodes its own 
message and eavesdrops upon the confidential information 
belonging to the other user. Based on symmetry of this two- 
user BC model, we can express the secrecy capacity region 
in an alternative way. 

Corollary 2: For an MGBC-CM modeled in as dTJ, the 
secrecy capacity region can be written as 



C 



MG 
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0</3<l 



MG-2 



(/?) 



where TZ^'^ "^{P) denotes the union of all (Pi, P2) satisfying 

0<Pi <log2 6(/3) 
and 0<P2 <log2 6(/3), 

^i(/3) is the largest generalized eigenvalue of the pencil 

(1 - /3)Phhg (1 - /3)Pgg^ 

^ 1 + /3P|h^e2|2 ' ^ 1 + /3P|g^e2|2 



and 



UP) = 



l + /3P|g^e2 



12 



1 + /3P|h^e2i2 ■ 
Remark 1: Theorem [T] and Corollary |2] imply that if a and 
/3 satisfy the implicit function 71(a) ~ then 

7^^«(a) =7^^G-2(^)^ 

For example, it is easy to check ■R^'^{1) = n^^^'^{Q). 

Now, by applying Corollary |2] and setting /? = 1, we 
can show that the rate pair (0,log2A2) is the corner point 
corresponding to the maximum achievable rate of user 2 in 
the capacity region C^'^ . 

Corollary 3: For the MGBC-CM, the maximum secrecy 
rate of user 2 is given by 



i?2 



l0g2 A2 



where A2 is defined in (|3]l. 

Corollaries □ and [5] imply that for the MGBC-CM, both 
users can achieve positive rates with information-theoretic 
secrecy if and only if Ai > 1 and A2 > 1. Furthermore, 
Lemma [T] illustrates that this condition can be ensured when 
the attenuation vectors h and g are linearly independent. 

IV. Achievability: Secret DPC Scheme 
A. Double-Binning Inner bound for the BC-CM 

An achievable rate region for the broadcast channel with 
confidential messages (BC-CM) has been established in [6] 
based on a double-binning scheme that enables both joint 
encoding at the transmitter by using GeFfand-Pinsker binning 
and preserving confidentiality by using random binning. 

Lemma 2: ( [6, Theorem 3]) Let Vi and V2 be auxiliary 
random variables, VL denote the class of joint probability 
densities p(vi, V2, x, 2/1,2/2) that factor as 

p(vi, V2)p(x|vi, V2)p(yi, ?/2|x), 

and TZ\{tt) denote the union of all (Pi,P2) satisfying 

0<Pi </(Vi;yi)-/(Vi;r2,V2) 
and 0<P2 </(V2;r2)-/(V2;ri,Vi) 

for a given joint probability density tt G O. For the BC-CM, 
any rate pair 



(Pi,P2) ecoi y 7^I(7r) 



(6) 



is achievable. 



B. Secret DPC Scheme for the MGBC-CM 

The achievable strategy in Lemma |2] introduces a double- 
binning coding scheme. However, when the rate region (|6]l is 
used as a constructive technique, it not clear how to choose 
the auxiliary random variables Vi and V2 to implement the 
double-binning codebook, and hence, one has to "guess" the 
density of p(vi,V2,x). Here, we employ the DPC technique 
with the double-binning code structure to develop the secret 
DPC (S-DPC) achievable rate region. 

For the MGBC-CM, we consider a secret dirty-paper en- 
coder with Gaussian codebooks. Based on Lemma|2] we obtain 
a S-DPC rate region for the MGBC-CM as follows. 

Lemma 3: [S-DPC region] Let 7^f "°^^(A'ui , i^Us) de- 
note the union of all , R2 ) satisfying 

< El < log2 
and < i?2 < log2 



1 + 

l+g^(Au, + A'ujg 
l + h^(i^ui + A^ujh" 

^2 1 + g^^Auig 



(7) 



(8) 



Then, any rate pair 



(-Ri,i?2) e CO 



u 



S-DPC 



(ATui, A'uJ 



^tr(/fui+A:u2)<-P 

is achievable for the MGBC-CM. 

Proof: A detail proof can be found in [14]. ■ 
The S-DPC achievable rate region requires optimization of 
the covariance matrices K\j^ and K\j^. In order to achieve 
the boundary of C]^*^, we choose ATui and K\j^ as follows: 

A'ui = aPeiBi 
and A'u2 = (1 - a)f C2(Q!)cf (a), < a < 1 (9) 

where ei is defined in (|2]i and C2(a) is a normalized eigenvec- 
tor of the pencil (|5]l corresponding to 72(a). Next, inserting 
^ into ^ and (O, we obtain 



= 71(a) 



and 



l + g^ATuig 
[1 + g^(A:u, + A:u,)g][l + h^A'uih] 



72(«)- (10) 



[1 + h^(Aui + Aujh][l + g^/^uig] 

Now, by substituting ( fTOl i into Lemma[3] we obtain the desired 
achievable result. 

V. Converse: Sato-Type Outer Bound 
A. Sato-Type Outer Bound 

We consider an important property for the BC-CM in the 
following lemma. 

Lemma 4: Let V denote the set of channels Y^\y^ whose 
marginal distributions satisfy 



and 



Py-i|x(yi|x) =pyi|x(yi|x) 
Py2|x(y2|x) =pyi|x(y2|x) 



for all yi, 1/2 and x. The secrecy capacity region C^^*-^ is the 
same for the channels y^j^ S V . 

We note that V is the set of channels Y.^\y^ that have the 
same marginal distributions as the original channel transition 
density pyj^yjix- Lemma |4] implies that the secrecy capacity 
region C^'^ depends only on marginal distributions. 

Theorem 2: Let 7^o(^Yj y:,|X' ^x) denote the union of all 
rate pairs (i?i,i?2) satisfying 



and 



i?i </(X;yi|f2) 

i?2 </(X;y2|yi) 



for given distributions Px and Py^ Yaix- The secrecy capacity 
region Cf^ of the BC-CM satisfies 



C 



MG 



(11) 



Proof: A detail proof can be found in [14]. ■ 
Remark 2: The outer bound (fTTT i follows by evaluating the 
secrecy level at each receiver end in an individual manner, 
while letting the users decode their messages in a cooperative 
manner In this sense, we refer to this bound as "Sato-type" 
outer bound. 

For example, we consider the confidential message Wi that 
is destined for user 1 (corresponding to Yi) and eavesdropped 
upon by user 2 (corresponding to Y2). We assume that a genie 
gives user 1 the signal I2 as side information for decoding Wi . 
Note that the eavesdropped upon signal Y2 at user 2 is always 
a degraded version of the entire received signal (Fi, 12)- This 
permits the use of the wiretap channel result of [1]. 

Remark 3: Although Theorem |2] is based on a degraded 
argument, the outer bound ( fTTT i can be applied to the general 
broadcast channel with confidential messages. 

B. Sato-Type Outer Bound for the MGBC-CM 

For the Gaussian BC, the family V is the set of channels 

yi = h^x + zi 

m = g^x + Z2 

where zi and Z2 correspond to arbitrarily correlated, zero- 
mean, unit-variance, complex Gaussian random variables. Let 
p denote the covariance between Zi and Z2, i.e, 

Cov(Zi,Z2) = /9 and \p\^ <l. 

Now, the rate region 7?.o (Py^ y,|X'-^x) is a function of the 
noise covariance p and the input covariance matrix A'x. We 
consider a computable Sato-type outer bound for the MGBC- 
CM in the following lemma. 

Lemma 5: Let 7?.Q*^(p, A'x) denote the union of all rate 
pairs {Ri,R2) satisfying 

0< Pi < fi{p,Kx.) 
and 0<P2</2(p,Ax) 



where 



Ax) = minloga 
/2(p, ifx) = niinlog2 



(h - t/g)^gx(h ~ t^g) + M'', P) 

V'll'^, p) = 1 + I'^P - v*p - p*v 

and ?/'2(/^,p) = 1 + ImP - - P>- 
For the MGBC-CM, the secrecy capacity region satisfies 
Cr°C U 7^o(p,Ax) 

tr(_ft:x)<P 

for any < |p| < 1. 

Remark 4: Lemma |5] is based on the fact that Gaussian 
input distributions maximize TZoiPy^ FalX'-^x) for Gaussian 
broadcast channel. To illustrate this point, we consider 

/(X; YilFa) = h{Y^\%) - log2(27re)(l - \p\^) 

<h{Y^-vY^)-\og^{2^e)(\-\p\^). 

Moreover, the maximum-entropy theorem [17] implies that 
h{Y\ — vY-i) is maximized by Gaussian input distributions. 

Finally, we prove that the Sato-type outer bound of 
Lemma |5] coincides with the secrecy capacity region C]^*^ by 
choosing the parameter p — (g^ei)/(h^ei). A detail proof 
can be found in [14]. 

VI. Numerical Examples 

In this section, we study a numerical example to illustrate 
the secrecy capacity region of the MGBC-CM. For simplicity, 
we assume that the Gaussian EC has real input and output 
alphabets and the channel attenuation vectors h and g are 
also real. Under these conditions, all calculated rate values 
are divided by 2. 
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In particular, we consider the following MGBC-CM 
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where h = [1.5,0]^, g = [1.801,0.872]^, and the total 
power constraint is set to P = 10. Fig. |2] illustrates the 
secrecy capacity region for the channel We observe 

that even though each component of the attenuation vector 
h (imposed on user 1) is strictly less than the corresponding 
component of g (imposed on user 2), both users can achieve 
positive rates simultaneously under the information-theoretic 
secrecy requirement. Moreover, we compare the secrecy ca- 
pacity region with the secrecy rate region achieved by the 
time-sharing scheme (indicated by the dash-dot line). Fig. |2] 
demonstrate that the time-sharing scheme is strictly suboptimal 
for providing the secrecy capacity region. 
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